4.3
Medium
CVE-2023-32978 A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins LDAP Plugin 2.10 | earliest → < 2.10.1 | 2.10.1 |
Other CVEs of Jenkins LDAP Plugin
The 4 CVEs of Jenkins LDAP Plugin →
CVE-2026-84662
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data…
4.3
Medium
CVE-2026-48917
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation
6.6
Medium
CVE-2026-48916
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals
6.6
Medium